Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/631AEA2C068011EDA24E02CEF1222468.roa
File:                     631AEA2C068011EDA24E02CEF1222468.roa (raw, json)
Hash identifier:          gsLROwhyznw4i9oNEtSipbbh/KDgIARVk+mOLW+KFjw=
Subject key identifier:   77:A5:79:FE:F1:22:04:A5:13:06:54:B9:C3:F1:97:2E:6F:9F:7C:0A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1577
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/631AEA2C068011EDA24E02CEF1222468.roa
Signing time:             Mon 18 Jul 2022 10:00:01 +0000
ROA not before:           Mon 18 Jul 2022 09:59:56 +0000
ROA not after:            Fri 30 Dec 2022 09:59:56 +0000
asID:                     328608
IP address blocks:        156.229.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5495 (0x1577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 18 09:59:56 2022 GMT
            Not After : Dec 30 09:59:56 2022 GMT
        Subject: CN=62d52f21-ed23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:fa:81:2e:88:4b:e3:14:e9:8f:b2:e8:17:
                    71:79:c8:b5:a5:06:98:5e:73:a0:a5:82:cb:1f:86:
                    20:cf:9b:d7:99:80:f8:37:13:25:6d:6a:3a:5d:af:
                    df:70:e2:c0:ed:9c:79:18:e7:b2:1c:fe:ab:dd:99:
                    30:c9:60:1a:1a:2f:d3:7b:bc:a9:32:2b:8f:50:06:
                    7b:7a:3c:3a:68:8d:60:de:d3:02:07:ab:00:a6:97:
                    6a:7a:36:5e:81:32:db:48:9f:8c:d7:ad:61:a7:02:
                    90:4c:6c:8b:c8:44:b1:ce:82:23:3e:fc:0f:0a:fe:
                    e5:7d:e0:bd:cf:63:a1:9a:ae:a6:a4:f8:81:e1:03:
                    91:88:75:07:9f:74:9f:cf:09:0c:a6:ff:c5:1f:00:
                    28:85:1a:27:f1:ea:0c:93:e9:be:59:30:6f:cb:04:
                    95:c9:a9:84:48:18:94:fc:d1:ad:96:b7:c9:17:20:
                    ef:06:9a:f0:48:db:98:90:b9:1c:a6:17:00:c5:12:
                    cf:2b:c9:73:ad:bb:fc:8e:fd:e2:f2:6a:31:89:f1:
                    4e:b2:fb:99:92:61:fd:d5:34:c8:9f:e0:ec:f3:93:
                    dd:84:10:dd:e6:71:df:fe:5d:2e:3e:d9:98:f1:78:
                    7c:92:43:17:20:8f:a9:ac:3e:a6:92:4c:03:07:0f:
                    33:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A5:79:FE:F1:22:04:A5:13:06:54:B9:C3:F1:97:2E:6F:9F:7C:0A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/631AEA2C068011EDA24E02CEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b4:10:c9:db:da:d7:b7:e1:e1:74:6a:74:7c:d4:b0:4a:da:89:
         4b:d6:b2:cc:6e:c7:71:51:40:63:c2:5d:7b:95:7a:7c:f1:2d:
         eb:73:a7:cb:86:be:f2:dd:97:12:37:a2:5c:45:32:3f:ca:b1:
         49:eb:fa:89:86:07:48:ce:e2:20:d6:48:2b:df:11:a0:cd:30:
         84:41:5e:ce:d4:d5:48:08:02:6a:23:ed:d9:b8:4a:45:97:eb:
         a2:c7:3d:8b:69:8d:64:87:31:80:dd:48:fe:d4:53:4e:ac:3a:
         8b:58:5a:15:87:53:3a:f9:7d:7e:ac:41:82:42:2d:ec:15:1a:
         30:b9:ed:9a:d0:1b:b8:f0:a8:4a:f9:37:ec:14:41:3a:0e:88:
         33:30:ad:d7:00:1a:e1:ec:80:5b:30:86:a2:c4:51:ef:2c:35:
         69:44:f0:26:74:23:fb:2e:7b:95:29:7a:47:f6:ad:2a:5b:1d:
         25:da:1a:df:8b:6a:df:21:7f:01:f3:71:17:a2:68:41:7d:e8:
         ef:37:df:38:39:6a:f3:5d:b6:d8:83:e7:2d:81:f3:e6:c3:49:
         f7:a8:01:0d:18:e2:71:5d:dd:c3:a6:98:6d:32:1e:84:95:e7:
         47:d2:cd:44:97:ee:00:85:52:70:46:e4:ff:bc:0a:c1:9e:e1:
         47:a1:b2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org